Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
File:                     6B0DCABA80D111EFA7138B77C4F9AE02.roa (raw, json)
Hash identifier:          sQvLjYN0bmIhD07Ob9ncrUmMN5zDoxoPL8qSXq1g7g0=
Subject key identifier:   74:7D:A0:FB:8D:BA:D5:A9:1C:28:01:71:88:F2:6D:1E:28:52:18:58
Certificate issuer:       /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial:       02D1
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
Signing time:             Fri 27 Mar 2026 01:35:04 +0000
ROA not before:           Fri 27 Mar 2026 01:35:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     142295
IP address blocks:        103.182.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
                          rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
        Validity
            Not Before: Mar 27 01:35:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c5dec8-0f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:2f:fc:b3:ef:06:38:52:58:88:73:fa:08:
                    eb:e3:ca:dc:7f:68:36:99:69:b2:8e:17:b5:49:0c:
                    69:87:3b:e4:d1:39:13:09:16:50:45:8b:a4:d4:d1:
                    60:0b:2a:63:ef:6d:f4:3b:5e:14:4e:dd:f6:67:b7:
                    24:07:d2:8d:6b:a9:e4:3d:cb:ee:d6:d1:7a:d9:b5:
                    f6:89:1d:71:a6:f3:4f:1b:7d:61:d6:15:5f:85:29:
                    ce:03:dd:04:ed:dd:6d:e2:e0:74:7b:41:d8:4b:ae:
                    1f:f5:07:cd:5d:ad:2e:b6:a1:6b:6b:a0:e5:e9:a4:
                    41:ec:a0:58:20:b8:04:7f:d3:6f:86:54:84:25:7b:
                    7a:49:2d:d7:a6:40:fe:6e:d9:2d:60:02:5a:4c:88:
                    15:00:8c:f0:00:9a:40:31:0a:a0:e0:d2:8c:bc:b1:
                    28:36:a0:de:8b:8b:f6:31:6f:ba:65:2a:28:af:c1:
                    33:5d:f6:30:a0:b8:c0:3f:d2:60:e4:b0:ac:e3:5b:
                    45:51:9f:de:08:ca:61:6e:44:fe:75:ff:84:f6:83:
                    c5:3f:f6:af:70:af:30:8e:b5:49:f5:20:d1:27:df:
                    4b:0e:2f:5c:66:af:b6:e1:24:2c:37:cd:22:46:44:
                    9d:45:8f:f3:96:0b:d5:a8:79:4a:e3:40:bc:ad:27:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:A0:FB:8D:BA:D5:A9:1C:28:01:71:88:F2:6D:1E:28:52:18:58
            X509v3 Authority Key Identifier:
                keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:18:df:aa:bd:68:5b:2d:8a:3c:c8:07:7e:15:83:fc:39:
         39:8f:c2:50:53:4b:37:04:7c:4d:5c:b9:01:cc:2b:93:b9:f1:
         f1:39:09:61:55:7d:2e:b8:72:08:33:33:a8:fe:8a:79:59:d8:
         96:fa:3c:15:68:6a:83:88:d6:af:1c:27:d0:1c:64:46:21:5d:
         9e:36:8e:fb:7c:b3:e1:9f:29:16:3f:5f:cc:3f:e5:6a:57:9f:
         db:55:1d:d0:29:a0:5a:86:aa:d5:11:f0:74:a4:30:f6:1c:c7:
         43:65:51:c5:e1:db:5d:ed:8b:d9:d2:9b:42:65:0a:ac:f1:a9:
         7e:a1:9a:b3:f2:1b:53:8d:73:81:fe:04:bf:09:3c:27:90:17:
         e7:45:3d:f9:54:52:69:de:72:62:da:53:8c:5f:41:bb:cd:45:
         7c:ce:91:10:3d:01:2f:a8:eb:f8:44:38:a2:c8:34:26:a3:f4:
         93:97:22:13:21:9b:22:0b:22:65:59:ad:7a:c4:eb:ac:0e:69:
         10:22:3a:83:1f:c7:9e:8a:4c:9b:c2:db:fb:1e:f2:d0:9f:47:
         3e:71:d9:5d:a3:b0:20:19:ab:18:d5:73:99:9a:66:ed:1d:bb:
         17:8c:d0:62:20:ec:ec:33:59:f8:59:e1:98:bf:99:04:25:68:
         df:ce:b0:b6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy
MjRGOTVCN0YwHhcNMjYwMzI3MDEzNTA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM1ZGVjOC0wZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyigv/LPvBjhSWIhz+gjr48rcf2g2mWmyjhe1SQxphzvk0TkTCRZQRYuk1NFg
Cypj7230O14UTt32Z7ckB9KNa6nkPcvu1tF62bX2iR1xpvNPG31h1hVfhSnOA90E
7d1t4uB0e0HYS64f9QfNXa0utqFra6Dl6aRB7KBYILgEf9NvhlSEJXt6SS3XpkD+
btktYAJaTIgVAIzwAJpAMQqg4NKMvLEoNqDei4v2MW+6ZSoor8EzXfYwoLjAP9Jg
5LCs41tFUZ/eCMphbkT+df+E9oPFP/avcK8wjrVJ9SDRJ99LDi9cZq+24SQsN80i
RkSdRY/zlgvVqHlK40C8rSe+RwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHR9oPuN
utWpHCgBcYjybR4oUhhYMB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD
NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzE1MjQvNDkxRjAyREUyQzc4MTFFRDk1RjNERTE0QzRGOUFFMDIvNkIwRENBQkE4
MEQxMTFFRkE3MTM4Qjc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7YOMA0GCSqGSIb3DQEBCwUAA4IBAQC18xjfqr1oWy2KPMgHfhWD
/Dk5j8JQU0s3BHxNXLkBzCuTufHxOQlhVX0uuHIIMzOo/op5WdiW+jwVaGqDiNav
HCfQHGRGIV2eNo77fLPhnykWP1/MP+VqV5/bVR3QKaBahqrVEfB0pDD2HMdDZVHF
4dtd7YvZ0ptCZQqs8al+oZqz8htTjXOB/gS/CTwnkBfnRT35VFJp3nJi2lOMX0G7
zUV8zpEQPQEvqOv4RDiiyDQmo/STlyITIZsiCyJlWa16xOusDmkQIjqDH8eeikyb
wtv7HvLQn0c+cdldo7AgGasY1XOZmmbtHbsXjNBiIOzsM1n4WeGYv5kEJWjfzrC2
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:09:43 2026 by rpki-client